Encryption & KMS Engineer

About the role

CCDS is looking for an experienced Encryption & KMS Engineer to operate and support a centralized Key Management System and enterprise encryption infrastructure in Dammam, Saudi Arabia. The role covers the secure management of cryptographic keys throughout their lifecycle and supports integrations with enterprise applications, databases, infrastructure, identity services and security platforms. It is a full-time, onsite position on a long-term project assignment.

Key responsibilities

• Operate and administer the centralized Key Management System (KMS).
• Manage cryptographic keys: generation, storage, rotation, backup, recovery, revocation, archival and secure destruction.
• Configure and maintain encryption policies according to approved security standards.
• Administer KMS connectors, agents and integrations across enterprise systems.
• Support AD/LDAP integration and identity-based access controls, and KMIP integrations.
• Monitor KMS health, system events, audit logs and security alerts, and investigate key-management and encryption incidents.
• Coordinate with database, application, infrastructure and security teams during system onboarding, and support encryption-at-rest and data-protection implementations.
• Maintain configuration records, operational documentation, procedures and runbooks.
• Take part in testing, disaster recovery, maintenance and knowledge transfer, and escalate complex issues to senior engineers and vendor support.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or a related field.
• 5+ years of experience in encryption, data security, KMS, key management or enterprise cybersecurity.
• Hands-on experience with enterprise KMS/encryption platforms is highly preferred.
• Experience with AD/LDAP, KMIP, databases, servers, applications or storage integrations.
• Experience with enterprise security infrastructure and regulated environments is an advantage.
• Willingness to work full-time onsite in Dammam.

Required skills

• Strong understanding of symmetric and asymmetric cryptography, key lifecycle, TLS/SSL, certificates and secure key storage.
• KMIP, AD/LDAP, PKI and cryptography.
• Preferred certifications: CompTIA Security+ or equivalent; Thales CipherTrust Manager / CTE / KMS training; PKI and cryptography training; ITIL 4 Foundation.